Go modules · #2638 by repository stars

github.com/cbergoon/merkletree

v0.5.0cbergoon/merkletree ↗New releases in your daily digest, changelog included.

Last release 1 months ago
14 Aug 2026
Ships unpredictably
gaps range from 2 months to 3.5 years
Most releases are documented
notes for 4 of 5 stable releases
Nothing withdrawn
no release was ever pulled
9 years old
21 releases · first in 2017

Release timeline

21 releases since 2017

2017201920212023

Releases

v0.5.1-0.20260814143555-560f0c849eea14 Aug 2026pre-release
Nothing published for this version
v0.5.1-0.20260814060754-702c0a0e6c2514 Aug 2026pre-release
Nothing published for this version
v0.5.014 Aug 2026
Proof generation and verification, mainly.
Proof generation and verification, mainly.

Locating content was a linear scan, making a single proof O(n) and a full set
O(n squared). WithLeafIndex, GetMerklePathByIndex and the AppendMerklePath forms
take that to a map probe, a direct index, and zero allocations respectively.

VerifyProof checks a proof against a root without the tree, which is what a light
client actually needs and what the package could not previously do.

WithParallelism spreads content hashing across goroutines, off by default because
it calls Content.CalculateHash concurrently.

VerifyTree and the binary decoder allocate substantially less.

The RFC 6962 construction is now checked against the Certificate Transparency
reference vectors, and the default construction against other implementations of
the same folklore. Both live in nested modules, so merkletree still has no
dependencies.

All additive; no existing API changed.

One column per quarter.

v0.4.014 Aug 2026Security

…them, closing the second preimage weakness and CVE-2012-2459 for trees that opt in

Adds serialization and an opt-in RFC 6962 construction, and fixes four
correctness bugs. The default construction is unchanged: roots, proofs and
indexes are byte for byte identical to v0.3.0.

New:

Marshal/Unmarshal for binary, JSON and gob, closing #13. A tree is encoded
as the seed it rebuilds from, and the recorded root makes decoding
self-checking
NewTreeWithOptions, with WithHasher, WithSortedSiblings and WithRFC6962
WithRFC6962 prefixes leaf and interior hashes and splits odd node counts
rather than duplicating them, closing the second preimage weakness and
CVE-2012-2459 for trees that opt in
Sorted() and RFC6962() accessors
ErrNoContent, ErrNilContent and ErrContentNotFound sentinels

Fixed:

VerifyTree recomputed from content but never checked the hashes recorded on
the nodes, so an edited interior hash went unnoticed
a nil entry in the content slice panicked instead of returning an error
Node.sort was dead

Behaviour changes, same signatures:

GetMerklePath returns ErrContentNotFound for content that is not in the
tree, where it previously returned nil, nil, nil
VerifyTree is stricter, and now rejects a tree whose stored node hashes have
been edited

Open source →

v0.3.013 Aug 2026

Modernized tooling and fixed four bugs. No API changes, and roots, proofs and indexes are byte-identical to v0.2.0.

Modernized tooling and fixed four bugs. No API changes, and roots, proofs
and indexes are byte-identical to v0.2.0.

go 1.21 is now the minimum (was 1.12)
GitHub Actions replaces Travis
VerifyContent now compares against the tree's merkle root
sortAppend no longer writes into its callers' spare capacity
RebuildTree no longer promotes the odd-count padding leaf to real content
GetMerklePath tells left from right by node identity, not by hash

Open source →

v0.2.1-0.20230201134527-59b506280c4d1 Feb 2023pre-release